AIRiskAware
AI Governance Glossary
Governance Concept

What Is Pseudonymisation?

Pseudonymisation is replacing identifying details with a pseudonym so data cannot be attributed to a person without separately held additional information.

Definition

Pseudonymisationreplacing identifying details with a pseudonym so data cannot be attributed to a person without separately held additional information.

Pseudonymisation (GDPR Article 4(5)) is a safeguard, not an exemption — the data is still personal data and the rules still apply, because the link back to the individual exists, just held separately. It is a recommended risk-reduction measure for training and analysis, but it is weaker protection than true anonymisation.

Source: GDPR, Article 4(5)

Plain-language explanation

Pseudonymisation (GDPR Article 4(5)) is a safeguard, not an exemption — the data is still personal data and the rules still apply, because the link back to the individual exists, just held separately. It is a recommended risk-reduction measure for training and analysis, but it is weaker protection than true anonymisation.

Primary source: GDPR, Article 4(5)

Related terms

Anonymisation Re-identification Data Minimisation

See where you stand on AI governance

Take the free 7-question maturity assessment and get a personalised action plan.

Free assessment — 3 minutes →